Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f8dc99a-dec4-3d29-8d7c-70300ddd367f.roa
File:                     2f8dc99a-dec4-3d29-8d7c-70300ddd367f.roa (raw, json)
Hash identifier:          Z6Mkz3Tu4VSL3tphxpl0MZ8kfQTuX2TNCwyl08QXlYE=
Subject key identifier:   93:B1:BE:1D:A3:91:B9:C5:D0:63:FC:21:B8:22:93:14:9B:AE:02:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFC1437F6EB149951A2D31620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f8dc99a-dec4-3d29-8d7c-70300ddd367f.roa
Signing time:             Thu 28 May 2026 15:06:01 +0000
ROA not before:           Thu 28 May 2026 15:06:01 +0000
ROA not after:            Wed 26 Aug 2026 15:06:01 +0000
asID:                     36632
IP address blocks:        192.35.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:14:37:f6:eb:14:99:51:a2:d3:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 15:06:01 2026 GMT
            Not After : Aug 26 15:06:01 2026 GMT
        Subject: CN=8d7fa919-a6da-4a46-ba2f-2ad0c9cc9996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a2:ac:49:94:88:e8:f6:bf:cf:21:5b:bb:e3:
                    b8:05:e2:66:60:9e:dd:d8:0f:1e:ea:1c:b4:66:b7:
                    5a:a7:78:86:b2:2e:64:e4:a2:ff:e7:13:21:ad:00:
                    ab:f3:0b:2d:5f:67:b1:3c:ab:84:08:01:3a:07:ca:
                    3a:86:aa:1d:6c:99:2b:75:16:37:6f:84:57:21:d9:
                    e2:86:d2:80:3e:d5:96:bb:62:91:af:5d:e4:68:86:
                    d1:af:0c:7b:9a:6f:43:84:fc:df:75:9f:7d:a6:af:
                    90:f9:32:fe:48:df:73:9f:8b:e1:28:dd:24:a6:e5:
                    8e:e6:c8:aa:e4:d0:31:af:dd:3c:3f:23:3f:22:72:
                    b5:cf:06:ee:bf:ab:e0:43:8d:34:d3:51:ce:57:a8:
                    eb:90:c8:e4:eb:8a:76:95:c9:2f:56:b9:f2:41:b8:
                    7e:c9:33:91:03:59:c9:e2:06:4a:61:a0:b5:bb:6f:
                    f5:62:20:60:d9:f1:40:45:ca:34:24:11:59:7b:9a:
                    d4:50:83:09:47:c9:92:06:39:31:45:d6:a0:94:e3:
                    c1:44:d8:d8:e9:a1:23:dc:c2:86:46:71:b9:c7:ae:
                    9f:79:53:52:4b:24:8d:9d:e2:13:cc:17:c1:75:1c:
                    51:b3:d3:46:da:86:5a:73:f2:7d:00:d4:6d:58:4b:
                    3e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B1:BE:1D:A3:91:B9:C5:D0:63:FC:21:B8:22:93:14:9B:AE:02:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f8dc99a-dec4-3d29-8d7c-70300ddd367f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:a4:b2:01:2b:20:be:d5:e9:ff:3a:2b:68:58:b8:9f:5b:
         a8:84:89:bf:00:da:d7:e1:ea:4d:85:d0:51:06:2f:87:65:7b:
         aa:fc:d1:cf:67:f8:22:cd:a0:e9:f6:67:bf:a1:0b:65:47:fa:
         dd:fe:ca:a9:80:d2:a7:6e:9c:fa:cd:60:f1:f8:7c:bc:95:27:
         f1:4e:d9:85:30:0b:15:d1:5a:2e:c5:46:d3:35:1b:8b:ea:f1:
         f7:d1:03:5b:ce:dd:04:29:0e:88:59:b4:74:6d:d2:1b:55:4e:
         e2:a3:eb:79:61:df:0b:aa:f3:f1:c1:46:22:e5:5f:79:5d:3b:
         c3:be:90:67:df:68:87:2f:68:2d:12:47:fc:e5:bc:1d:73:b7:
         c1:49:8e:36:6c:1c:d6:67:63:87:d9:30:72:73:21:25:5b:6f:
         a1:bb:99:4f:15:fa:fa:a8:14:dc:ca:d3:b6:bc:8d:c4:f0:25:
         6b:13:cf:c6:b8:2a:a7:da:5c:c0:67:d8:0d:cf:e4:45:4b:fc:
         73:b2:34:aa:2a:f1:92:eb:fd:61:db:02:e7:84:04:fc:b5:e7:
         60:c1:3e:55:b1:50:65:17:a6:ee:0e:58:9f:d7:11:c8:9d:86:
         ad:8f:5f:b1:24:f1:65:27:48:aa:5c:19:43:c3:a6:8a:04:30:
         45:22:5b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:02 2026 by rpki-client